Behavioral task
behavioral1
Sample
fa3a5a3970b280201d9ef080e5fad1308455b1877c87290d05620d9862be340d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa3a5a3970b280201d9ef080e5fad1308455b1877c87290d05620d9862be340d.exe
Resource
win10v2004-20240508-en
General
-
Target
fa3a5a3970b280201d9ef080e5fad1308455b1877c87290d05620d9862be340d
-
Size
1.5MB
-
MD5
b267277264ec6ab98981348c9ad56f78
-
SHA1
183adc86f61e7270bc34c8e816847192a8fac6a5
-
SHA256
fa3a5a3970b280201d9ef080e5fad1308455b1877c87290d05620d9862be340d
-
SHA512
a9bb64566076bbb60bd3a5cf60ccc16d8bd391598c9564c47398bd7c980778a06de0d430c70091c2ca6f930d40f24f6edda6e4fa9432f18d1fa00f8799ede35e
-
SSDEEP
24576:/kB0tywECxdovlGOMv0LpG1Lan8LHHgMTdMaDQTqwjvyVQvtsH3T8BK+j4Ba:8atywEIdalGOMvGc1LzHxXDATaQvW2KN
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa3a5a3970b280201d9ef080e5fad1308455b1877c87290d05620d9862be340d
Files
-
fa3a5a3970b280201d9ef080e5fad1308455b1877c87290d05620d9862be340d.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE